Full-Time

Senior Software Engineer

Analysis

Posted on 9/26/2025

FOSSA

FOSSA

51-200 employees

Generates SBOMs, analyzes software risk

Compensation Overview

CA$120k - CA$200k/yr

+ Equity

Vancouver, BC, Canada

In Person

Category
Software Engineering (1)
Required Skills
Python
Java
C/C++
Requirements
  • Experience building and supporting scalable Software as a Service products and features.
  • Experience as a full-stack software engineer owning and building features end-to-end.
  • Experience with relational databases and writing performant SQL queries.
  • Ability to break down complex problems, drive towards a solution, and communicate it with the team and other stakeholders (both verbally and written).
  • You're comfortable navigating complex domains and building intuitive software for them.
  • You thrive in an environment that prefers prototypes over proposals.
  • Proactive in sharing ideas and informed opinions with others.
  • Attention to detail and quality to anticipate edge cases ahead of time.
  • A growth mindset and willingness to learn new things.
  • You have 3+ years of experience working as a backend engineer.
  • Willingness to take part in an on-call rotation.
  • Ability to mentor and be mentored by others.
  • Experience with observability tooling.
Responsibilities
  • Work closely with the whole company to plan, design, build, and refine core product features.
  • Own user-impacting features from conception to completion.
  • Build and scale our core product and technical infrastructure.
  • Have significant ownership in our technical architecture and product roadmap.

FOSSA provides software supply chain risk management and Software Composition Analysis (SCA) to enterprises, generating and analyzing Software Bills of Materials (SBOMs) and turning them into actionable data. It scans code and dependencies, builds SBOMs, and analyzes them for regulatory compliance, transparency, and risk, while automating findings into development and security workflows via its SaaS platform. The service differentiates itself with its enterprise-scale focus on SBOM generation and operationalization alongside comprehensive SCA that covers licenses and vulnerabilities in one system. Its goal is to help organizations reduce software supply chain risk, meet regulatory requirements, and improve visibility into their software stack.

Company Size

51-200

Company Stage

Series B

Total Funding

$33.9M

Headquarters

San Francisco, California

Founded

2015

Simplify Jobs

Simplify's Take

What believers are saying

  • EdgeBit acquisition enables automated dependency updates beyond scanning.
  • StackShare acquisition taps 1.5M developers for open-source insights.
  • FOSSA Quality launch assesses package health beyond vulnerabilities.

What critics are saying

  • GitHub Advanced Security displaces FOSSA in 12-18 months for mid-market.
  • NVD delays cause 200K false positives at 100M scans annually.
  • EU Cyber Resilience Act exposes compliance gaps in 12-24 months.

What makes FOSSA unique

  • FOSSA automates SBOM generation, ingestion, and operationalization for supply chain transparency.
  • FOSSA scans compiled binaries like JARs and DLLs via fingerprinting without source access.
  • FOSSA achieves 99.8% license scanning accuracy across 20+ build systems.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Unlimited Paid Time Off

Company Equity

Growth & Insights and Company News

Headcount

6 month growth

0%

1 year growth

-3%

2 year growth

-3%
FOSSA
Sep 30th, 2025
FOSSA Acquires EdgeBit: From Scanning to Updating

FOSSA has acquired EdgeBit, which pioneered automated dependency updates using a world-class static analysis engine.

TechCrunch
Aug 1st, 2024
Open source startup FOSSA is buying StackShare, a site used by 1.5M developers | TechCrunch

Open source compliance and security platform FOSSA has acquired developer community platform StackShare, the company confirmed to TechCrunch. 

Artificial Lawyer
May 23rd, 2024
Legal Innovators California Sponsors – A Legal Tech Treasure Trove!

On June 4 and 5 the Legal Innovators California conference takes place in San Francisco. Joining us will be more than two dozen companies at the frontier of legal tech and innovation. Here are our sponsors – and what an incredible group they are. Check all of them out below:Headline Sponsor Private Practice Day: StenoHeadline Sponsor In-House Day: SimpleDocsDisputes:StenoRelativityJus MundiClearbriefContracting, Contract Data Management + Legal AI AssistantsSimpleDocsTangibleAvvokaLegalOn TechnologiesHarveyRedactableeBreviaEtainRecitalCentariCallidusLawDroidALSP, Consulting + Advisory:Gravity StackFlatiron Law GroupSkillburst (Digital Learning)ClearyXDWFUnitedLexLegal Ops, Workflows + Risk Management:FossaCohesoAbstractincorporightSimpleClosure–So, if you want to see what’s really happening now in legal tech and innovation, and would like to meet some of the leading companies in the sector, then come along to Legal Innovators California conference – on June 4 + 5 in San Francisco and find out. The event will take place at the CJM, 736 Mission St, San Francisco, CA 94103 and is across two days. For ticket information, please see here.Come along to what will be a great event in San Francisco focused on how the legal world is changing! Plus, you’ll get to meet the people and organisations right at the heart of this market evolution – and what a great group they are! See you there!

FOSSA
Mar 12th, 2024
Beyond Vulnerabilities: Understanding Package Health with FOSSA Quality

To help solve this problem, FOSSA, Inc. recently launched FOSSA Quality.

TechCrunch
Nov 20th, 2023
With Functional Source License, Sentry Wants To Grant Developers Freedom ‘Without Harmful Free-Riding’

Yet another software license is vying for the attentions of SaaS companies seeking to align themselves with the open source realm, without compromising their commercial endeavors.Sentry, an app performance monitoring (APM) company that helps companies such as Disney, Microsoft, and Cisco track and resolve laggy or buggy applications, has transitioned its core product to a new license it designed called the Functional Source License (FSL). The company’s open source chief Chad Whitacre says the license is for any SaaS firm that wishes to “grant freedom without harmful free-riding.”“There’s been a long history of companies with deeper pockets and more resources taking advantage of traditional open source companies,” Whitacre told TechCrunch over email. “Open source companies, regardless of license or the pedantic definition, have become increasingly reliant on being venture-backed, for-profit, or more importantly being supported by the companies that rely on their code.”SwitchRecent history is littered with examples of companies that grew off the back of open source projects, but later abandoned those roots to protect their commercial interests. In 2021 Elastic switched Elasticsearch from an Apache 2.0 license to a duo of source-available licenses, a move designed to prevent third-parties such as AWS from essentially selling its own version of Elasticsearch “as-a-service” without contributing much back to the original project. More recently, HashiCorp did something similar with Terraform, while the likes of Element (with Matrix) and Grafana transitioned from permissive open source licenses to so-called “copyleft” licenses, essentially forcing users to keep derivative projects open source, or pay for a license to use the product.As for Sentry, the San Francisco-based company started out more than a decade ago under a permissive BSD 3-Clause license, one that comes with few restrictions. Similar to the other aforementioned companies, Sentry relicensed its core product back in 2019 to counter what co-founder and CTO David Cramer called “funded businesses plagiarizing or copying our work to directly compete with Sentry.“This has included taking marketing content from our website, plagiarizing our documentation and framing it as their own, or straight-up copy/pasting our product visuals,” Cramer wrote at the time

INACTIVE